Event Log: Error 1501

Last reviewed: May 14, 1997
Article ID: Q111720

The information in this article applies to:

Microsoft Windows NT operating system version 3.1
Microsoft Windows NT Advanced Server version 3.1

SYMPTOMS

When you start Event Viewer, the following error appears:

   The Eventlog service on the local machine is not started.

Then, after you start the Eventlog service from the Services section of Control Panel the following error message appears:

   Could not start the Eventlog service on \\<machine name>.
   Error 1501: No event log file could be opened,
   so the event logging service did not start.

CAUSE

This error only occurs when the Windows NT system drive is formatted for NTFS. When the Eventlog Service starts, it opens three log files in the %SYSTEMROOT%\SYSTEM32\CONFIG directory. If the system does not have the correct permissions, it cannot open and write the log files.

RESOLUTION

For these files to be opened successfully, Read and Write permission in this directory must be granted to the Administrators group, the System account, or the Everyone group. Any one of these three enables the system to function normally.

Additional query words: prodnt
Keywords : kbtool ntutil
Version : 3.1
Platform : WINDOWS

THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.

Last reviewed: May 14, 1997
© 1998 Microsoft Corporation. All rights reserved. Terms of Use.